Cross Site Request Forgery
Last updated
Last updated
Attacker subverts client DOM.
Using a crafted web page.
Using a vulnerable web page that was subverted.
Using a XSS attack.
Client browser issues requests to external server.
Browser will send cookies authenticating requests.